$ rpki-client -vvf repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft File: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft (raw, json) Hash identifier: sGT3g/f0dc3r47tvwefHsUOojX+WEeRGsWNspwFxqII= Subject key identifier: 64:8B:F9:36:2E:E9:98:31:A2:08:96:65:BE:4F:90:8D:D9:9C:A7:38 Authority key identifier: 7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 Certificate issuer: /CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Certificate serial: 27BFBB5633AD3490C46E51B63435348979D12299 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft Manifest number: 0319 Signing time: Wed 06 Aug 2025 19:00:52 +0000 Manifest this update: Wed 06 Aug 2025 18:55:52 +0000 Manifest next update: Sat 09 Aug 2025 23:54:52 +0000 Files and hashes: 1: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: 18AbUsVhIGEQ6HCFJXdnQ22A4WQNqI+V6DxuOgi205k=) 2: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl (hash: AUJlCsbHaY1yQyKN7ek+bcBMy2NSR8s8MhlI19jfk18=) 3: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: yN3b6aLARK75R5KMvUSuceVNjELLLGOMFIhCi2LU/yI=) 4: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: dQbf3sVA4jaVic2L+O9XI1H3j7ymjWLOW6r+meQnacg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 23:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:bf:bb:56:33:ad:34:90:c4:6e:51:b6:34:35:34:89:79:d1:22:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Validity Not Before: Aug 6 18:55:52 2025 GMT Not After : Aug 9 23:54:52 2025 GMT Subject: CN=648BF9362EE99831A2089665BE4F908DD99CA738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d9:8b:4a:0d:2d:f3:ab:b5:b0:14:eb:be:e0: 74:12:5c:69:75:20:09:d7:4e:bb:9d:e9:d9:14:79: 65:4b:c3:70:19:37:c5:3a:29:d4:e5:d6:25:4f:21: 01:6d:fa:32:c5:ea:d4:e1:8f:c4:75:2e:6f:81:99: b4:8d:5e:bc:fc:8a:ea:d2:fc:a0:78:f7:45:82:b7: 3f:83:2a:4a:26:5c:63:1f:41:7d:b9:2c:2f:47:0d: 03:eb:69:bd:6a:e7:c5:0b:cc:b9:f6:09:19:d6:bc: 2e:e0:6c:aa:bd:46:9a:b3:2b:e6:5a:1c:9d:18:96: 17:59:b5:c0:8e:50:72:5e:1e:87:44:d9:47:ec:9e: d2:f2:d6:41:00:5b:7b:aa:6f:56:70:9a:5e:a0:3f: 92:51:7e:a8:33:96:56:d1:8f:cb:03:c3:96:3f:de: 54:db:8d:c8:5e:f9:05:74:03:20:9f:0a:00:1d:73: ae:a8:89:69:b3:5e:48:0c:99:7b:1c:8b:b0:66:50: 21:bb:1e:de:37:ef:27:2b:60:cb:d2:a2:31:3c:c5: 9b:76:8e:68:58:69:d7:18:be:aa:55:4a:91:e9:59: 1a:60:9f:92:42:15:33:6e:5b:d1:95:35:7c:cc:0b: 2f:36:ab:51:fd:ad:fd:ed:a5:c9:fc:99:e9:1d:fa: 8c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8B:F9:36:2E:E9:98:31:A2:08:96:65:BE:4F:90:8D:D9:9C:A7:38 X509v3 Authority Key Identifier: keyid:7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d1:ca:1e:c8:ee:d2:f8:6c:2f:bb:f7:c6:12:43:3b:a8:92: 49:4d:e1:05:be:d0:2e:7b:35:aa:8f:ac:4f:7b:ef:40:4a:5b: 17:fd:f2:9f:7f:b2:fc:e7:1a:fc:e4:7d:cf:31:bb:eb:dc:2e: db:0f:d5:76:ee:5b:93:40:bd:f6:1f:77:15:02:39:7c:5e:68: a5:45:98:a6:ad:f4:d7:63:f9:57:0c:8d:a1:ec:1c:12:b8:6c: 95:c5:d0:48:23:a0:1a:32:06:30:4a:a3:4e:71:1e:af:8e:32: 00:18:f1:75:e5:31:2a:ab:7a:0f:bf:13:cb:30:6c:8e:f9:2c: a2:d0:5d:6d:05:84:f1:8e:7d:c8:a8:15:35:7d:b3:ff:5f:71: 41:3a:47:40:28:bf:a1:80:3e:e4:e6:ff:94:85:82:7d:59:22: a6:d6:04:35:0c:38:96:3c:c8:e9:24:14:04:e5:9e:a8:f4:61: 12:9f:a1:50:f6:fb:cd:bf:b2:9e:e8:4d:be:6d:46:66:07:30: 39:54:c7:2e:4b:16:89:27:5f:77:47:7a:34:16:fa:3e:8c:3b: 3b:0f:6a:2d:41:34:e6:0e:18:40:b6:66:c6:53:26:3e:b0:00: 4c:1e:7e:52:d9:b9:f1:d3:08:42:d7:c3:76:e5:4e:6a:eb:b7: 89:e2:c5:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ7+7VjOtNJDEblG2NDU0iXnRIpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJE Qzk1RkFGNTAeFw0yNTA4MDYxODU1NTJaFw0yNTA4MDkyMzU0NTJaMDMxMTAvBgNV BAMTKDY0OEJGOTM2MkVFOTk4MzFBMjA4OTY2NUJFNEY5MDhERDk5Q0E3MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG2YtKDS3zq7WwFOu+4HQSXGl1 IAnXTrud6dkUeWVLw3AZN8U6KdTl1iVPIQFt+jLF6tThj8R1Lm+BmbSNXrz8iurS /KB490WCtz+DKkomXGMfQX25LC9HDQPrab1q58ULzLn2CRnWvC7gbKq9RpqzK+Za HJ0YlhdZtcCOUHJeHodE2UfsntLy1kEAW3uqb1Zwml6gP5JRfqgzllbRj8sDw5Y/ 3lTbjche+QV0AyCfCgAdc66oiWmzXkgMmXsci7BmUCG7Ht437ycrYMvSojE8xZt2 jmhYadcYvqpVSpHpWRpgn5JCFTNuW9GVNXzMCy82q1H9rf3tpcn8mekd+oxdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZIv5Ni7pmDGiCJZlvk+QjdmcpzgwHwYDVR0j BBgwFoAUem5/45FS0cwXT2kiFD+q69yV+vUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTJjMTM4Yy0yZTI0LTQ5ZjUtOGFkYS0wMDI3Y2JhN2YxNzgvMC83QTZFN0ZFMzkx NTJEMUNDMTc0RjY5MjIxNDNGQUFFQkRDOTVGQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJEQzk1 RkFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFB RUJEQzk1RkFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvRyh7I7tL4bC+798YSQzuokklN4QW+0C57 NaqPrE9770BKWxf98p9/svznGvzkfc8xu+vcLtsP1XbuW5NAvfYfdxUCOXxeaKVF mKat9Ndj+VcMjaHsHBK4bJXF0EgjoBoyBjBKo05xHq+OMgAY8XXlMSqreg+/E8sw bI75LKLQXW0FhPGOfcioFTV9s/9fcUE6R0Aov6GAPuTm/5SFgn1ZIqbWBDUMOJY8 yOkkFATlnqj0YRKfoVD2+82/sp7oTb5tRmYHMDlUxy5LFoknX3dHejQW+j6MOzsP ai1BNOYOGEC2ZsZTJj6wAEweflLZufHTCELXw3blTmrrt4nixWU= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:18 2025 by rpki-client